Thread 105724538

team leader edition

previous: >>105680195

READ THE WIKI! & help by contributing:
https://wiki.installgentoo.com/wiki/Home_server

/hsg/ is about learning and expanding your horizons. Know all about NAS? Learn virtualization. Spun up some VMs? Learn about networking by standing up a OPNsense/PFsense box and configuring some VLANs. There's always more to learn and chances to grow. Think you’re god-tier already? Setup OpenStack and report back.

>What software should I run?
Install Gentoo. Or whatever flavor of *nix is best for the job or most comfy for you. Jellyfin/Emby/Plex to replace Netflix, Nextcloud to replace Googlel, Ampache/Navidrome to replace Spotify, the list goes on. Look at the awesome self-hosted list and ask.

>Why should I have a home server?
De-botnet your life. Learn something new. Serving applications to yourself, your family, and your frens feels good. Put your tech skills to good use for yourself and those close to you. Store their data with proper availability redundancy and backups and serve it back to them with a /comfy/ easy to use interface.

>Links & resources
Cool stuff to host: https://github.com/awesome-selfhosted/awesome-selfhosted
https://reddit.com/r/datahoarder
https://www.labgopher.com
https://www.reddit.com/r/homelab/wiki/index
https://wiki.debian.org/FreedomBox/Features
ARM-based SBCs: https://docs.google.com/spreadsheets/d/1PGaVu0sPBEy5GgLM8N-CvHB2FESdlfBOdQKqLziJLhQ
Low-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCI
SFF cases https://docs.google.com/spreadsheets/d/1AddRvGWJ_f4B6UC7_IftDiVudVc8CJ8sxLUqlxVsCz4/
Cheap disks: https://shucks.top/ https://diskprices.com/
PCIE info: https://files.catbox.moe/id6o0n.pdf
>i226-V NICs are bad for servers
>For more SATA ports, use PCIe SAS HBAs in IT mode
WiFi fixing: pastebin.com/raw/vXJ2PZxn
Cockpit is nice for remote administration

Remember:
RAID protects you from DOWNTIME
BACKUPS protect you from DATA LOSS

>>105724538 (OP)
nice printer

I'm setting up btrfs on LVM with a read cache. Thoughts?

>>105725195
>stable releases exist
that bug happens on qbittorrent 5.1.1, which is supposed to be stable

>>105725273
Personally I only update it when a version gets added to the whitelist.

i don't love much but i love servers

This thread is stable.

>>105725273
well then your rage was justified

>>105725273
you should have just installed the fucking qbit service directly instead of fucking around with containers you dumbfuck. it works perfectly fine.

>>105725386
agreed, because it's running arch.

>not using transmission
ngmi

>>105724735
it's a sleeper printer, i got one too

I switched PSUs on this junk and I'm somewhat suprised but slightly disappointed.
Could have sworn I measured 22w with powerD enabled and the old PSU before but the meter measured 35w. I think the first time was with no SSDs and just USB boot
I guess two SSDs take a non-trivial amount of power

With the new 12V PSU + PicoPSU its now 23w, 12w drop with the exact same config.
Given the efficiency is known with the meanwell (85% at 10% load), this means the original delta sfx was something like 56% efficient.

With a single noctua fan in the whole thing its silent, could probably toss it in a closet and it'll last basically forever.

>>105726097
please anon, install a cover on that power supply
they're not just for looks. its important in an open environment. you dont want bugs in your powersupply do you

>>105725327
still kek'ing at this

How to get Pi-Hole working with podman?

>>105726419
Why are you even using podman? Not fronting, just curious.

>>105726424
secure by design, doesn't need daemon.

>>105726097
>12w drop with the exact same config.
Nice.
I remember some angry retard in /hsg/ the other week claiming you could not get more efficient with a picopsu despite evidence like yours and also from all over the internet.

>>105726226
I live in the south, bugs will figure there way into anything that isn't completely sealed.
Found a moth stuck in a 120mm fan hub once.
Best defense is just prevention.

>>105726933
It's not the exact result I was looking for but I did drop exactly what I thought I would. Still would have liked sub 20w, not that I'm hurting with power costs. Just need to wait a bit to see if anything gives up early and it can work till the end of time, or until the PCB starts delaminating or something.

>>105727463
>Still would have liked sub 20w
you tried some powertop --auto-tune ?

should I upgrade from Truenas Scale ElectricEel to fangtooth?

I don't have any apps or vms configured and was looking to get myself setup on it to replace unraid (its so slow and buggy)

>>105726419
Privileged : true

>>105727506
it's on freebsd, it's just a router
will probably move to something Linux based eventually because not having NIC choices fucking suck.

>want to replace my HDDs with SSDs to make it quieter and far lower power (so lower heat)
>Willing to accept much lower capacity, however even 2 dozen used cheap 800gb SSDs in a not stupid (ie raid0) zpool config will only get me about 12tb for about $1000
>Currently I have 62tb and it cost about $400 with decom SAS HDDs
ihatethememorycartelihatethememorycartelihatethememorycartelihatethememorycartelihatethememorycartel

how the hell does SHR (syntology) do this with their raid? there's mixed drives but there's no unused space like on a traditional raid 5

I really want their raid if thats true but I dont' want to buy their disk shelves since I already have a NAS + disk shelf myself

Yeah straight to the meat:
>How do i set up my machine?
>How do i make my own e-mail?

>>105728017
Maybe it's something like snapraid, though I'm just guessing.

>>105728040
>How do i set up my machine
what machine anon

>>105724538 (OP)
Imagine the smell...

I'm using Artix on my home server

Whom do you serve, /hsg/?

I don't know what OS I want to use...

>>105726097
There's minimum draw for psu to even work and for couple I tried it was 10w on average.
So no load, just jump on the pins to make it start.

The SMELL that is brought with this photo is sickening. Chickens fucking stink.

>>105730914
>Chickens
Pretty sure those are ducks. Not that they'll smell any better.

>>105730486
use nixos

Read a bit of the wiki and want to set up a Pi 5 with one of those Radxa Penta SATA hat things, given I have some SATA ssds lying around. Question is once I have a domain registered, a dynamic DNS set up and a letsencrypt certificate ready, how do I keep the little bastard secure? I know you should only forward the ports you're actually using, and use odd ports at that, but what else. Fail2ban? I'd like to run storage/photo backup, maybe a calendar and notes but I'm drawing the line at email since that'd be too damn hard to stop it from getting spammed to death/rejected by everything I try to send to.

>>105727724
Just that line in docker-compose.yaml?

>>105724538 (OP)
usecase of chickens?
also i just started a jonsbo n1 truenas build

>>105731210
use wireguard instead of opening ports to services if you can

>>105731210
>use odd ports
a meme that doesnt help security one iota

just keep your shit updated and be mindful of what you expose to the world

>>105731673
Yes and all lower case .
This will disable alot of the security features of podman and make containers designed for docker work with it.

As long as you run the container as its own non root user it will still be more secure than docker

>>105728040
>How do i make my own e-mail?
you don't. a self hosted email is going to get filtered by most big email providers as spam.

>>105728040
>my own e-mail
Do this if you're a masochist.

>>105732391
thanks
But I still get this error
Error: unable to start container "<4chan filter detect this as spam>": rootlessport cannot expose privileged port 53

>>105732776
Use a non root port (above 1024) or run as root with even more security compromises

the hacker known as 4chan is making it hard for you

>>105732790
Don't you need port 53 to have DNS blocking working?
ports:
# DNS Ports
- "53:53/tcp"
- "53:53/udp"
# Default HTTP Port
- "80:80/tcp"
# Default HTTPs Port. FTL will generate a self-signed certificate
- "443:443/tcp"
# Uncomment the line below if you are using Pi-hole as your DHCP server
#- "67:67/udp"
# Uncomment the line below if you are using Pi-hole as your NTP server
#- "123:123/udp"

>>105724746
I have the same thing except using bcache and with LUKS in the mix.

someone talk me out of this

I just thought of a genious way of using mixed drive sizes while having 1-2 drives parity with mdadm and LVM.

You first partion all your drives out from the small denominator, e,g, you have 18, 18, 14, 12, 4 tb drives

so you make 4TB paritions from all the drives, using mdadm to make them raid 5, then you make 8TB paritions out the next slices from all but the 4tb drive. then you repeat for the 14tb then the 18tb drives

you're then left with 4 RAID 5 arrays you then group together using LVM. Now you have 18TB only use for parity and the rest of the space is useable despite mixed drive sizes.

Why hasn't anyone thoguht of this or made a system of this?

>>105726419
don't bother with this snake oil

>>105732797
To avoid running as root you'll need to have the host use a free port above 1024 (keep 53 for inside the container) then have a DNS server like on your router only talk upstream to your pihole container on on the non root port you set .
Honestly for DNS I wouldnt do this though .

Better to just run the container as root and enjoy the rest of your day or go hardcore with a non root VM that has its own dedicated IP address so it can expose port 53 without root on the host

Being secure ain't easy and that's why docker is very popular

>>105732937
Even with sudo podman-compose it didn't work

>>105732982
Same port error?

>>105732982
Post your whole yaml and take a picture so 4chan doesn't intercept it

>>105732995
Yeah, it refuse to let port 53.
>>105733006
It's the same as the github instructions in
https://github.com/pi-hole/docker-pi-hole
I just added privileged : true just like >>105727724 suggested

>>105733027
Its important to know where you added privaliged: true

>>105733027
The github say you need these capabilities
Try addeding just "NET_BIND_SERVICE" to "cap_add:"
Might need the other caps too

this might be slightly off topic for /hsg/ but what are you guys' thoughts on usenet vs private trackers for getting your stuff?

>>105733027
try this https://pastebin.com/0ZTTpfFy

>>105733042
Really?
It was at the end of the file
>>105733091
>>105733281
Tried yours and still get this error
Error: unable to start container "": rootlessport cannot expose privileged port 53

>>105733359
Weird it didnt give me that error when I ran it as root.
What OS ?

>>105733373
Arch
Even when running at root fails with the same error.
Or throw about a process dns-aarkv or something using the port.
BTW that's the only container I have running.

>>105732890
when your 18TB drive goes that will take five of your smaller partitions out and everything will die

>windows update time, god dammit
>fine, do it
>windows updates
>reboot into linux
>boot takes forever for some reason
>sudo dmesg
>"usb 1-7, device descriptor read/64, error -110"
>this is holding up my boot for 60 seconds until linux gives up
>plug things into every physical port I have
>none of them correspond to bus 1 port 7
>whatthefuckareyoutalkingabout.yaml
>troubleshoot for 90 minutes and get nowhere
>stumble upon a leddit port
>"unplug computer, hold power for 10 seconds to discharge everything, then boot it up"
>fuck it, why not?
>...
>it works

I fucking hate Microsoft with every fiber of my being. seriously considering just blackholing their hosts to stop updates

>>105731043
ducks definitely smell better they're like cats they take care of their coat (feathers)

>>105733459
Try docker to see if its a general network config problem or a podman problem

>>105733459
NTA but it might be cleaner to run it on a port higher than 1024 and redirect 53 to it, externally.

iptables -t nat -A PREROUTING -i eth0 -p udp --dport 53 -j DNAT --to-destination 192.0.3.1:1053


Otherwise you can test with this, but I wouldn't recommend such a change system-wide:

sysctl net.ipv4.ip_unprivileged_port_start=53

Anyone run sunshine/moonlight?
I started having this weird issues out of nowhere.
It started after the dummy plug was removed mid game.
I tried rebooting the server and the client but it didn't help.
I keep getting the same issue (long RTSP hand shake and fails to complete and tell me to check ports TCP/UDP), or get the screen with no mouse capture. and error with vague exit code.

>>105733701
wait what dummy plug
i just start both and connect

>>105733779
There are HDMI plugs that sort of fake a connected monitor for GPU passthrough VM gaming.

even a 4i lsi hba doesnt get enough power from my futro s940 pcie x1, guess im gonna put in a x4 lan adapter then and run opnsense on it

>>105733512
just enable metered internet in the connection settings

>>105733701
try this sunshine fork, it has virtual display support so you dont need the dummy plug
https://github.com/ClassicOldSong/Apollo

>>105733779
Just a way to trick GPU into making image.
Yours is connected to a display I presume?
I figured it out, it seem the sunshine service stopped working
>>105734181
>windows only
No thank you

if you run linux, proxmox etc. as your server how do you back them up in case you experience boot drive failure?

>>105734343
>GPU passthrough VM gaming
>doenst use windows in the VM
you retarded or what

whats the use case for having server rack/ switches for a home network?

Why i need anything more than a typical consumer router/switch, possibly 2 acting as a mesh network..

I'm retarded but I was able to figure out how to setup caddy to expose some services from my home network (jellyfin, the lounge, etc) externally with duckdns.
After a few months though it seems like duckdns has really awful stability and goes down almost every single day for a few minutes. Is there any easy drop in alternative to duck dns with my setup?

>>105734980
Buying a domain and using ddns

Beelink vs GMKtec?

>>105734853
For the home user its otherwise expensive geek furniture.
Seems like half the time when people do have a rack, literally nothing is actually rack mountable except a patch panel or a "PDU" that's a glorified extension cable with the mini PCs and consumer NAS units on shelves.

I thought about rackmounting my network shit but ultimately id be spending $160 for something that looks slightly neater.

If you have a giant ass house, with multiple rooms wired with ethernet, multiple APs, etc then it makes sense.

>>105735010
Thanks, I just asked chatgpt and it said I can buy a domain and then use cloudflare DNS only and it's not against the TOS

>HP Apollo 4200 G9 server
Should I get this?

What sort of LSI card should I be looking for if I want to connect 2x SAS-3 SFF-8643 ports from the backplane to my server?

>>105735157
>chat gpt
>cloudflare
>TOS
That all sounds a little sus .
I just use namecheap and ddclient

>>105735237
LSI 9300-8I

>>105735191
Yea looks nice

>>105734737
We dont say the r-word here

where can i get a SGI IRIS Indigo plush

>>105734853
I like buying computers and networking gear, and a rack keeps it relatively organized

>>105734980
buy a domain or use freedns.afraid.org

>>105735279
Is there a difference between Inspur, Supermicro and Fujitsu models? From what I gathered, I should be looking for cards that have already been flashed to IT mode like this thing:
>https://www.ebay.pl/itm/404487397911
though I've heard you can find quite a few counterfeit cards

>>105734737
NTA but unless its bare metal there isnt much advantage to a windows gaming server vs GNU .
The only games that don't work on proton/wine also don't work in a windows VM

I have a really shitty 5G modem acting as a backup line for my network. The problem is it tends to hang itself every couple of days, losing connection but not reconnecting until power cycled. Are there cheap smart outlets I can program to restart when they either lose internet connection or triggered by a script by a third host?

>>105734980
>duckdns has really awful stability and goes down almost every single day for a few minutes
this isnt the case
and besides, that wouldnt even cause an issue, dns is tolerant of such faults to an extent

>>105735460
Tp kasa wifi smart switch and home assistant monitoring connection to flip the switch

>>105735495
Well duckdns.org is not loading for me right now and coincidentally I can't access jellyfin externally.

>>105735444
no, for all intents and purposes they're identical.
https://forums.servethehome.com/index.php?threads/lsi-raid-controller-and-hba-complete-listing-plus-oem-models.599/post-4321

>you can find quite a few counterfeit cards
occasionally. but usually its really obvious because they look different to the other cards. dont think that paying more will save you from counterfeits either. best not to worry too much.

>>105735559
Can you ping your home IP externally?

>>105735568
Or telnet if you don't have ping response setup

>>105735559
works on my machine

>>105735568
>>105735578
>>105735582
Hm, it's working for me now but if you're telling me duckdns is fine for you then I'll have to try some troubleshooting to see where the issue lies.
Generally if I find I can't access my jellyfin server the first thing I do is try to load duckdns.org and every single time it's been down for me so I'd be really surprised if it something on my end, but I'll try looking into it.

>>105735700
And just to back myself up, if you check this link it looks like there were many reports of it being down in the last couple of hours.
https://downforeveryoneorjustme.com/duck-dns

>>105735556
>Tp kasa wifi smart switch
Nice, thanks anon!

>>105735700
>>105735738
i literally have 100% response on the couple hosts i have using duckdns, wtf

i suppose it doesnt help that they set ttl to 60

>>105731694
>jonsbo n1
Five 3.5", what a trooper. Idk, for me I had enough with the Microserver G8 SAS backplane, as it turns out, it can't give enough juice to four 20W drives, two is its limit. I just don't trust them anymore, at least not in these "small" form factors.
> 20W, WTF?
Starting power for 20TB He drives from HGST.

>look at 19" NAS with NVMe/U.2 slots
>start at 5k
>most only have 9 slots
>only four hotswap
Who the fuck is this made for. With that kind of budget you can build a system that can fit five times that many U.2 drives and it'd cost less.

>>105736350
>19"
theyre made for enterprise, you cant spend time tinkertrannying on your boss's time

lmao I installed synology dsm 7.2 in my unraid VM, didn't expect that

I guess now I can use SHR?

>>105734737
Why run a VM for poorly designed OS, when wine/proton can run most of the games bare metal?

>>105733779
How?
I need to keep a monitor connected and powered on.

>>105736720
you tell me, that retard is running proton inside a VM

>>105736729
you either use the appolo fork or you use a dummy plug, hes talking nonsense

>>105736490
Yeah because a supermicro board with supermicro pcie to u.2 adapters is le tinker tranny but a fucking QNAP NAS is peak reliability.

>>105736735
I don't think he does?
I mean dummy plug is needed even when you're running bare metal if you aren't connecting a display just like >>105736745 said.
The GPU need to detect a connected monitor to start a video output.

>>105736982
see
>>105733997
>>105734343
but Id like to be proven wrong because it just doenst make sense to me, but Im a container hater

>>105735449
Not true. The only games that don't work in a Windows VM are some online games with some forms of anti-cheat. Otherwise and especially with cracked games compatibility is flawless, certainly better than proton.
>>105737102
I think you are correct.

>>105736944
qnap is for retards no matter what form factor it comes in

>>105737102
>but Id like to be proven wrong because it just doenst make sense to me, but Im a container hater
Sorry, I don't understand you.
What's your point exactly?
>>105737179
>certainly better than proton
Well if my games run at 60 fps @ 1080p on wine, why do I need to mess with windows?

Has anyone tried using a smartphone as a home server?
they have powerful hardware nowdays and power efficient, I'm wondering if its possible to install linux on them and turn it into a standard server

>>105737482
>they have powerful hardware nowdays and power efficient
they are

>I'm wondering if its possible to install linux on them and turn it into a standard server
you cant. every piece of hardware has propietary driver blobs inaccessible by your debians and raspbians

what's a good price for (used) ecc ddr4 udimm
has anyone tried the modules from aliexpress

>>105737482
I'm done with armshit forever, x86 is good enough now
if it has to be really energy efficient I'd rather support risc v

>>105737482
>Has anyone tried using a smartphone as a home server?
I tried once.
Very very bad experience, at least with android.

>>105736006
does microserver not support staggered spinup?

>>105724538 (OP)
Hello folks,

I've updated the 4chan archiver, Ritual, with many great performance features.

https://github.com/sky-cake/Ritual

I want to put together a server that'll serve as my NAS and also my router (the existing router is just going to get turned into a wifi access point). My goal is to run OPNsense in a vm for the router, and have the host handle an encrypted BTRFS pool. I'm already using an encrypted BTRFS pool for storage but it's in my workstation and that produces too much heat to be left on all the time. I really want to use my existing disks and rebuild the pool, not backup and restore (which I already do), so the host OS is going to need LUKS.
This is also going to be my NVR.
I have the hardware I need already, I just need to decide on an operating system that'll give me a web management interface, has the ability for me to install Zoneminder, Shinobi, or Frigate, and support for the VM I'll need. Pcie pass though is desired but not essensital if I can give one of the NICs exclusively to the VM some other way.
I'm also willing to consider just yanking the SSD out of my Ubuntu workstation (after cloning it) and cramming it into the new motherboard. I'll need an m.2 to pcie adapter, but it should work with this motherboard anyway (other people have done it). Or if I'm lucky I can clone the 1TB NVMe drive onto my spare 1TB SATA drive.

Can Truenas do all this?

>>105738335
debian with cockpit or webmin

>>105738335
truenas doesn't give a shit about you or your home user applications

i'm having trouble getting my folder permissions to work.
i'm running my *arr stack in separate unprivileged LXCs on proxmox. they're all running in on the root user inside the container.
i also have a VM with a VPN and torrent/usenet downloaders. that VM runs on the anon user.
how do i get everything to work properly without setting 777 permissions on the directories?

>>105738983
forgot to add because it's really late:
of course all the LXCs and the VM read and write to the same drive. the LXCs via bind mounts and the VM via a mounted NFS directory.
i think i'll need a full rundown on this because i am just feeling retarded.

question that no one has managed to answer yet, if I use link aggregation to join multiple slower ports, will it be possible to have them all go into the same switch (of faster speed) and then have 1 cable going from the switch to a faster end point?

for ex. aggregating two 1GbE ports, connecting them to a 2.5GbE unmanaged switch, and then have one 2.5GbE connection go to my main PC and still retain the ~2GbE speed from the aggregated ports despite now using a single cable.

>>105725836
Source?

>>105739317
How do you aggregate ports with a unmanaged switch?